GK Telecom Limited Data Retention Policy

 Effective – Sep 2019

Data Retention Policy

1.Purpose

The purpose of this Policy is to ensure that necessary records and documents of GK Telecom Limited are adequately protected and maintained and to ensure that records that are no longer needed by GK Telecom Limited or are of no value are discarded at the proper time. This Policy is also for the purpose of aiding employees of GK Telecom Limited in understanding their obligations in retaining electronic documents – including e-mail, Web files, text files, sound and video files, PDF documents, and all Microsoft Office or other formatted files.

2.Policy

This Policy represents GK Telecom Limited’s policy regarding the retention and disposal of records and the retention and disposal of electronic documents.  

3.Administration

Attached as Appendix A is a Record Retention Schedule that is approved as the initial maintenance, retention and disposal schedule for physical records of GK Telecom Limited and the retention and disposal of electronic documents. We will make modifications to the Record Retention Schedule from time to time to ensure that it follows National legislation and includes the appropriate document and record categories for GK Telecom Limited; monitor legislation affecting record retention; annually review the record retention and disposal program; and monitor compliance with this Policy.

In addition, any retained information can only be used for the purpose for which it is stored. This is compliant with the Data Protection Act 1998 and the General Data

Protection Regulation (GDPR) (Regulation (EU) 2016/679) 

4.Suspension of Record Disposal in Event of Legal Proceedings or Claims

There are certain occasions when information needs to be preserved beyond any limits set out in the Policy. The Policy must be SUSPENDED relating to a specific customer or document and the information retained beyond the period specified in GK Telecom Limited’s Data Retention Schedule in the following circumstances:

Legal proceedings or a regulatory or similar investigation or obligation to produce information are known to be likely, threatened or actual.

A crime is suspected or detected.

Information is relevant to a company in liquidation or receivership, where a debt is due to GK Telecom Limited.

Information is considered by the owning unit to be of potential historical importance and this has been confirmed by the Administrator.

In the case of possible or actual legal proceedings, investigations or crimes occurring, the type of information that needs to be retained relates to any that will help or harm GK Telecom Limited or the other side’s case or liability or amount involved.

If there is any doubt over whether legal proceedings, an investigation or a crime could occur, or what information is relevant or material in these circumstances, the Administrator should be contacted, and legal advice sought.

The Administrator shall take such steps as is necessary to promptly inform all staff of any suspension in the further disposal of documents.

5.Security of personal information

GK Telecom Limited will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

GK Telecom Limited will store all personal information on our secure (password- and firewall-protected) servers.

The Client should acknowledge that the transmission of information over the internet is inherently insecure, and that GK Telecom Limited cannot guarantee the security of data sent over the internet.

The Client will be responsible for keeping their Username and Password used for accessing GK Telecom Limited’s website confidential; GK Telecom Limited will not ask for password other than when needed to log in to our website.

6.Amendments

GK Telecom Limited may update this policy from time to time by publishing a new version.

This page should be checked occasionally to ensure that the policy remains relevant.

7.Applicability

This Policy applies to all physical records generated during GK Telecom Limited’s operation, including both original documents and reproductions. It also applies to the electronic documents described above.

APPENDIX A RECORD RETENTION SCHEDULE

The Record Retention Schedule is organised as follows:

SECTION TOPIC

1. Accounting and Finance
2. Contracts
3. Corporate Records
4. Correspondence and Internal Memoranda
5. Personal Information
6. Electronic Records
7. Insurance Records
8. Legal
9. Miscellaneous
10. Personnel Records
11. Tax Records

1. ACCOUNTING AND FINANCE

Record Type and then Retention Period

• Annual Audit Reports and Financial Statements: Permanent
• Annual Audit Records, including work papers and other documents that relate to the audit: 7 years after completion of audit

• Annual Plans and Budgets:  7 years
• Bank Statements and Cancelled Cheques: 7 years
• Employee Expense Reports: 7 years
• Interim Financial Statements: 7 years

2. CONTRACTS

Record Type and then Retention Period

Contracts and Related Correspondence (including any proposal that resulted in the contract and all other supportive documentation):  7 years after expiration or termination

3. CORPORATE RECORDS

Record Type and then Retention Period

• Corporate Records (minutes, signed minutes of the Board and all committees, record of incorporation, articles of incorporation, annual corporate reports):    Permanent

• Licenses and Permits: Permanent

4. CORRESPONDENCE AND INTERNAL MEMORANDA

General Principle: Most correspondence and internal memoranda should be retained for the same period as the document to which they pertain or support. For instance, a letter pertaining to a particular contract would be retained as long as the contract (7 years after expiration). It is recommended that records that support a particular project be kept with the project and take on the retention time of that particular project file.

Correspondence or memoranda that do not pertain to documents having a prescribed retention period should generally be discarded sooner. These may be divided into two general categories:

1. Those pertaining to routine matters and having no significant, lasting consequences should be discarded within five years. Some examples include:

• Routine letters and notes that require no acknowledgment or follow up, such as notes of appreciation, congratulations, letters of transmittal, and plans for meetings.
• Form letters that require no follow up.
• Letters of general inquiry and replies that complete a cycle of correspondence.
• Letters or complaints requesting specific action that have no further value after changes are made or action taken (such as name or address change).
• Other letters of inconsequential subject matter or that definitely close correspondence to which no further reference will be necessary.
• Chronological correspondence files.
• Please note that copies of interoffice correspondence and documents where a copy will be in the originating department file should be read and destroyed, unless that information provides reference to or direction to other documents and must be kept for project traceability.

2. Those pertaining to non-routine matters or having significant lasting consequences should generally be retained permanently.

5. RETAINING PERSONAL INFORMATION

1. This Section sets out the data retention policies and procedure of GK Telecom Limited, which are designed to help ensure compliance with legal obligations in relation to the retention and deletion of personal information
2. Personal information that is processed by GK Telecom Limited for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

          Without prejudice to point 2 (above) GK Telecom Limited will usually delete personal data falling within the categories set out below at the date/time set out below:

Record Type and then Retention Period

• Information about a computer and about visits to and use of this website (including an IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths: 2 years

• Information provided when registering with our website

          (including email address): 2 years

• Information provided when completing a profile on our website (including a name, gender, date of birth, interests and hobbies, educational details): 2 years

Information provided for subscribing to email notifications and/or newsletters (including a name and email address):    Indefinitely or until the client chooses to ‘unsubscribe’

• Information provided when using the services on the website, or that is generated during the use of those services (including the timing, frequency and pattern of service use) : Indefinitely
• Information relating to any subscriptions made (including name, address, telephone number, email address and sector sought): 2 years or until consent is withdrawn
• Information posted to our website for publication on the internet: 5 years after post
• Information contained in or relating to any communications sent through the website (including the communication content and meta data associated with the communication): 2 years following contact

• Any other personal information chosen to be sent: 2 years following contact

Notwithstanding the other provisions of this Section, GK Telecom Limited will retain documents (including electronic documents) containing personal data:

• to the extent that GK Telecom Limited is required to do so by law;
• if GK Telecom Limited believes that the documents may be relevant to any ongoing or prospective legal proceedings;
• and to establish, exercise or defend GK Telecom Limited’s legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
• if explicit consent is given by the data subject. Consent is requested at least every 2 years from candidates seeking contract roles and at least every 12 months for candidates seeking permanent employment.

Each day GK Telecom Limited will run a database backup copy of all electronic data contained on GK Telecom Limited data centre, except for the one financial package. All other databases are in the cloud, connected to a Tier 3 data centre. This backup

will include all information relating to current users, as well as any information that remains due to any reason contained in this policy.

6. ELECTRONIC DOCUMENTS

1. Electronic Mail: Not all email needs to be retained, depending on the subject matter.
   • All e-mail—from internal or external sources – is to be deleted after 12 months. Staff will strive to keep all but an insignificant minority of their e-mail related to business issues.

• GK Telecom Limited will archive e-mail for 90 days after the staff has deleted it, after which time the e-mail will be permanently deleted.
• Staff will take care not to send confidential/proprietary information held by GK Telecom Limited to outside sources
• Any e-mail staff deems vital to the performance of their job should be copied to the relevant client or candidate record in GK Telecom Limited CRM system.

2. Electronic Documents: including Office 365 and PDF files, retention also depends on the subject matter.

GK Telecom Limited does not automatically delete electronic files beyond the dates specified in this Policy. It is the responsibility of all staff to adhere to the guidelines specified in this policy.

In certain case’s a document will be maintained in both paper and electronic form. In such cases the official document will be the electronic document.

7. INSURANCE RECORDS

Record Type and then Retention Period

• Certificates Issued to GK Telecom Limited Permanent
• Claims Files (including correspondence, medical records, etc.) Permanent
• Insurance Policies (including expired policies) Permanent

8. LEGAL FILES AND PAPERS

Record Type and then Retention Period

• Legal Memoranda and Opinions (including all subject matter files): 7 years after close of matter
• Litigation Files: 1 year after expiration of appeals or time for filing appeals
• Court Orders: Permanent MISCELLANEOUS

Record Type and then Retention Period

Material of Historical Value (including pictures, publications):    Permanent

• Policy and Procedures Manuals – Original: Current version with revision history
• Annual Reports: Permanent

10. PERSONNEL RECORDS

Record Type and then Retention Period

• Employee Personnel Records (including individual attendance records, application forms, job or status change records, performance evaluations, termination papers, withholding information, garnishments, test results, training and qualification records): 6 years after separation
• Employment Contracts – Individual: 6 years after separation Employment Records Correspondence with Employment Agencies and Advertisements for Job Openings:    3 years from date of hiring decision

11. TAX RECORDS

General Principle: GK Telecom Limited must keep books of account or records as are sufficient to establish amount of gross income, deductions, credits, or other matters required to be shown in any such return.

These documents and records shall be kept for as long as the contents thereof may become material in the administration of state, and local income, franchise, and property tax laws.

Record Type and then Retention Period

• Tax-Exemption Documents and Related

          Correspondence:    Permanent

• Tax Bills, Receipts, Statements: 7 years
• Tax Returns: Permanent
• Sales/Use Tax Records: 7 years
• Annual Information Returns: Permanent

//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

At gktelecom.com, accessible from https://gktelecom.com/, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by gktelecom.com and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in gktelecom.com. This policy is not applicable to any information collected offline or via channels other than this website. Our Privacy Policy was created with the help of the Free Privacy Policy Generator.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

How we use your information

We use the information we collect in various ways, including to:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

Log Files

gktelecom.com follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, gktelecom.com uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

For more general information on cookies, please read the Cookies article on Generate Privacy Policy website.

Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of gktelecom.com.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on gktelecom.com, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that gktelecom.com has no access to or control over these cookies that are used by third-party advertisers.

Third Party Privacy Policies

gktelecom.com’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

gktelecom.com does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.